security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update file_event_mimimaktz_memssp_log_file.yml

Browse Source
This commit is contained in:
Florian Roth
2021-12-20 12:51:27 +01:00
committed by GitHub
parent 8c61e58152
commit cf65b61397
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/file_event/file_event_mimimaktz_memssp_log_file.yml
+3 -3
View File
@@ -1,4 +1,4 @@
title: Mimikatz MemSSP default log file creation
title: Mimikatz MemSSP Default Log File Creation
id: 034affe8-6170-11ec-844f-0f78aa0c4d66
status: experimental
description: Detects Mimikatz MemSSP default log file creation
@@ -18,5 +18,5 @@ detection:
- 'mimilsa.log'
condition: mimikatz_memssp_filename
falsepositives:
- Unknown
level: high
- Unlikely
level: critical